| Package | Affected versions | Patched versions |
|---|---|---|
| application policy infrastructure controller | ≥ 4.0, < 4.2\(7l\)≥ 5.0, < 5.2\(2f\)< 3.2\(10f\) | 4.2\(7l\)5.2\(2f\)3.2\(10f\) |
| cloud application policy infrastructure controller | ≥ 4.0, < 4.2\(7l\)≥ 5.0, < 5.2\(2f\)< 3.2\(10f\) | 4.2\(7l\)5.2\(2f\)3.2\(10f\) |
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller (APIC) and Cisco Cloud Application Policy Infrastructure Controller (Cloud APIC) could allow an authenticated, remote attacker with Administrator read-only credentials to elevate privileges on an affected system. This vulnerability is due to an insufficient role-based access control (RBAC). An attacker with Administrator read-only credentials could exploit this vulnerability by sending a specific API request using an app with admin write credentials. A successful exploit could allow the attacker to elevate privileges to Administrator with write privileges on the affected device.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free